Lucene search
+L

3176 matches found

Kitploit
Kitploit
added 2026/09/03 12:02 p.m.3 views

CVE-2025-53770

Microsoft SharePoint CVE-2025-53770 Prueba de concepto DESCARGO DE RESPONSABILIDAD: Este código/payload se proporciona únicamente con fines educativos. El autor no aprueba ni respalda ningún uso no autorizado o malintencionado de este código. Úsalo solo en entornos que te pertenezcan o para los q...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/03 8:52 a.m.3 views

ToolShellFinder

🛠️ ToolShellFinder: Detección de CVE-2025-53770 y CVE-2025-53771 Un script de alto rendimiento en PowerShell 7+ para escanear registros de IIS y detectar signos de explotación relacionados con ToolShell , dirigido específicamente a las vulnerabilidades de día cero CVE-2025-53770 y CVE-2025-53771 e...

9.8CVSS7AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/03 6:29 a.m.5 views

GC2-sheet

GC2 GC2 Google Command and Control es una aplicación de comando y control que permite a un atacante ejecutar comandos en la máquina objetivo utilizando Google Sheet o Microsoft SharePoint List y exfiltrar archivos usando Google Drive o Microsoft SharePoint Document. Por qué Este proyecto ha sido...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 5:30 a.m.8 views

CVE-2026-55040-Mass-Exploit

JWT Token Bypass Exploit for Microsoft SharePoint CVE-2026-55040, CVSS 9.1. Forge authentication tokens using three attack vectors: Algorithm "none" skips signature verification Weak HS256 secrets with brute-force dictionary support RS256 key substitution Impersonate any user including...

9.1CVSS7.4AI score0.39652EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/03 5:28 a.m.3 views

CVE-2023-24955-PoC

CVE-2023-24955-PoC Exploit para Microsoft SharePoint 2019 Un exploit publicado para una vulnerabilidad llamada CVE-2023-24955. Vi el código y había algunos errores en resolveTargetInfo y getOAuthInfo. Luego los arreglé y ahora está para ti. ❗❗❗❗❗❗ Recuerda que debes ejecutarlo con Python2 yo prob...

7.2CVSS6.9AI score0.85395EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/03 5:28 a.m.5 views

CVE-2026-50522

CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 payloads and analysis. HTTP requests...

9.8CVSS7.4AI score0.84606EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/03 5:17 a.m.4 views

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot...

8.8CVSS7.4AI score0.76075EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/03 12:50 a.m.5 views

CVE-2023-29357-Check

CVE-2023-29357 Microsoft SharePoint Server Elevate Privilege Vulnerability This script will tell you if the target is vulnerable to CVE-2023-29357 Usage root@kitploit: python3 script.py Disclaimer This script is for educational purposes only. Do not use it against targets without prior mutual...

9.8CVSS7.4AI score0.99984EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 5:55 p.m.4 views

ZeroPoint

ZeroPoint.ps1 ⚠ Una utilidad defensiva de PowerShell para detectar y mitigar la explotación de la vulnerabilidad de día cero CVE-2025-53770 en Microsoft SharePoint Server. 🔍 Qué hace Este script de PowerShell está diseñado para: Detectar indicadores de compromiso, como webshells .aspx sospechosas...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/02 1:44 p.m.7 views

CVE-2026-63520

CVE-2026-63520 Sharepoint unsafe type RCE + CVE-2026-55040 chain Unauthenticated RCE on Microsoft SharePoint Server. No credentials needed. Stephen Fewer Rapid7 demonstrated CVE-2026-55040 at Pwn2Own Berlin 2026. Rapid7 then discovered CVE-2026-63520 during follow-up research, and VulnCheck...

9.1CVSS7.4AI score0.39652EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/02 9:19 a.m.5 views

CVE-2025-54897-LAB

实验室:CVE-2025-54897 - Microsoft Office SharePoint 中的反序列化漏洞 🚀 概述 本实验室演示了 Microsoft Office SharePoint 中的一个反序列化漏洞,该漏洞可实现远程代码执行(RCE)。此问题源于 SharePoint 的对象反序列化例程对不受信任的序列化数据处理不当,允许经过身份验证的攻击者在目标服务器上执行任意代码。该漏洞的 CVSSv3 评分为 8.8,属于高危漏洞,影响多个 SharePoint 版本,包括 Enterprise Server 2016、Server 2019 和 Subscription...

8.8CVSS7.9AI score0.19148EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 4:09 p.m.6 views

CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 De https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

9.8CVSS6.9AI score0.99913EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/01 2:12 p.m.4 views

CVE-2026-50522

🛡️ CVE-2026-50522 — Microsoft SharePoint RCE Investigation Critical SharePoint Deserialization Vulnerability Under Active Exploitation Created by Pratik Chhetri Report Date: 2026-07-27 📌 Executive Snapshot...

9.8CVSS7.4AI score0.84606EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 1:35 a.m.4 views

CVE-2026-55040

Microsoft SharePoint JWT 身份验证绕过(CVE-2026-55040) 概述 CVE-2026-55040.py 是一个概念验证(PoC)脚本,用于利用 SharePoint 身份验证绕过漏洞 CVE-2026-55040。 如需完整的技术分析,请参阅我们的 Rapid7 分析。 用法 root@kitploit: $ python CVE-2026-55040.py --help usage: CVE-2026-55040.py -h --target TARGET --host HOST --x5t X5T --realm REALM --sid SID...

9.1CVSS7.4AI score0.39652EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 1:10 a.m.4 views

CVE-2019-0604

CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

9.8CVSS6.9AI score0.99913EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/08/31 4:28 a.m.6 views

CVE-2026-45659

CVE-2026-45659 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...

8.8CVSS7.4AI score0.76075EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/30 5:01 p.m.3 views

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Detection rules for CVE-2025-53770 root@kitploit: alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/29 6:32 p.m.2 views

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server Elevazione dei privilegi Sfruttamento di CVE-2023-29357 CVE-2023-29357 è una vulnerabilità critica di elevazione dei privilegi che, se combinata con altre vulnerabilità, potrebbe potenzialmente portare all'esecuzione di codice in remoto. Il punteggio CVSS di...

9.8CVSS7.4AI score0.99984EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/29 3:01 a.m.4 views

MS-SharePoint-July-Patch-RCE-PoC

MS-SharePoint-July-Patch-RCE-PoC PoC para: CVE-2024-38094 CVE-2024-38024 CVE-2024-38023 Vídeo da PoC: https://youtu.be/u8mccaakISw...

7.2CVSS7.2AI score0.529EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 12:12 p.m.8 views

mssharepoint-scanner

MS SharePoint Scanner Uno strumento difensivo monofile e senza dipendenze per Microsoft SharePoint che combina service discovery singola o bulk con valutazione CVE per due vulnerabilità critiche on-premises: CVE-2026-55040 Critica 9.1 — bypass dell'autenticazione tramite token JWT CVE-2026-63520...

9.1CVSS7.4AI score0.39652EPSS
SaveExploits5
Rows per page
Query Builder